CVE-2024-37099

Severity

CRITICAL

CVSS

10.0

EPSS

0.00558

Risk score

40.2

CISA KEV

PoC

Published

2024-08-19

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2024-36426, GHSA-WGH2-2342-MM46

Products

StellarWP:GiveWP n/a ≤3.14.1

Sources

Deserialization of Untrusted Data vulnerability in Liquid Web GiveWP allows Object Injection.This issue affects GiveWP: from n/a through 3.14.1.